CVE-2026-33674

Description

### Impact Fix improper use of validation framework ### Patches Patched in 8.2.5 and 9.1.0 ### Workarounds None ### References none

How to fix CVE-2026-33674

To remediate CVE-2026-33674, upgrade the affected package to a fixed version below.

• Bitnami/prestashop—upgrade to 8.2.5 or later
• —upgrade to 8.2.5 or later

Is CVE-2026-33674 being exploited?

Low — EPSS is 0.0%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 8.2.5, >= 9.0.0, < 9.1.0
• from 0, < 8.2.5

CVSS scores

References (5)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2026-33674
• PATCHgithub.com/PrestaShop/PrestaShop
• WEBgithub.com/PrestaShop/PrestaShop/releases/tag/8.2.5
• WEBgithub.com/PrestaShop/PrestaShop/releases/tag/9.1.0
• WEB